CVE-2007-5493: Microsoft Windows Mobile

Medium severity, CVSS 4.3. EPSS: 4.2% chance of exploitation in the next 30 days.

The SMS handler for Windows Mobile 2005 Pocket PC Phone edition allows attackers to hide the sender field of an SMS message via a malformed WAP PUSH message that causes the PDU to be incorrectly decoded.

Affected products

• Microsoft Windows Mobile: version 2005 only

Published 2007-10-18. Last modified 2026-06-16.